Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/9b8df82b-7611-35c2-949c-579a9841c333.roa
File:                     9b8df82b-7611-35c2-949c-579a9841c333.roa (raw, json)
Hash identifier:          Xa+Yl0+kzLwY0Lc8zdisBLZguIoFd/xWV7UTLDJqEq4=
Subject key identifier:   57:F1:19:52:49:2D:8F:B6:EC:B9:B9:C8:47:EC:4F:7C:B3:87:FE:01
Certificate issuer:       /CN=69c54836-fbb3-43bf-9e5e-1041e7098f72
Certificate serial:       010D0C9F4328584F173252161A391A67FC29CB00
Authority key identifier: E8:63:20:33:D4:32:0A:11:DC:CA:8D:7D:90:F1:36:DF:C7:8A:4A:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/9b8df82b-7611-35c2-949c-579a9841c333.roa
Signing time:             Mon 07 Sep 2026 01:00:11 +0000
ROA not before:           Mon 07 Sep 2026 01:00:11 +0000
ROA not after:            Sun 06 Dec 2026 02:00:11 +0000
asID:                     396216
IP address blocks:        2602:f475::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/69c54836-fbb3-43bf-9e5e-1041e7098f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/69c54836-fbb3-43bf-9e5e-1041e7098f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:17:32:52:16:1a:39:1a:67:fc:29:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69c54836-fbb3-43bf-9e5e-1041e7098f72
        Validity
            Not Before: Sep  7 01:00:11 2026 GMT
            Not After : Dec  6 02:00:11 2026 GMT
        Subject: CN=9f8c0b26-2980-48a8-b2a9-ab0bf5134d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:2b:30:fa:c4:f6:4c:16:5d:46:74:14:6d:
                    88:4e:88:0f:4b:3c:e3:c8:99:b1:83:a8:40:62:b5:
                    c1:92:d1:df:bc:56:80:79:4d:f9:48:5c:ca:2a:cd:
                    c0:27:0b:cd:3a:ad:3c:f3:22:3d:4d:8d:b4:20:32:
                    f8:fb:49:79:20:a0:be:62:96:59:14:2a:8e:48:e3:
                    a9:d3:e4:70:62:44:99:38:ce:71:38:15:d9:1f:ae:
                    3f:33:c8:c6:90:1a:d4:1e:a0:31:69:d8:89:f2:97:
                    24:55:d2:fd:a2:ab:6d:57:c3:2b:18:bf:71:76:b8:
                    8c:40:9c:0d:c9:7e:85:9a:78:75:3f:65:0a:c8:8f:
                    53:aa:a9:ce:b9:bf:93:38:11:9c:6a:6f:cb:a8:45:
                    f2:57:2d:10:a1:30:ca:f5:64:0b:cd:55:38:ba:26:
                    bc:fa:52:a0:66:1e:46:70:6c:68:53:51:85:56:d9:
                    3d:28:dd:a0:ac:85:6a:0b:0f:7d:b1:b3:7b:7a:f2:
                    ff:2c:31:a3:b5:e7:06:6d:4d:a9:4f:48:ea:dd:d8:
                    63:33:6b:5f:e0:02:b8:08:e7:8d:d4:bb:e0:ad:f5:
                    24:41:ed:89:4d:90:51:60:37:8a:71:d8:43:7b:bc:
                    09:34:b4:78:52:7d:4d:1e:d4:e0:fe:03:ce:8d:ce:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F1:19:52:49:2D:8F:B6:EC:B9:B9:C8:47:EC:4F:7C:B3:87:FE:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/9b8df82b-7611-35c2-949c-579a9841c333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/69c54836-fbb3-43bf-9e5e-1041e7098f72.crl

            X509v3 Authority Key Identifier:
                keyid:E8:63:20:33:D4:32:0A:11:DC:CA:8D:7D:90:F1:36:DF:C7:8A:4A:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f475::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:18:d9:5c:b1:03:ba:11:fc:dd:50:f6:24:ba:44:5b:6e:ff:
         e8:aa:6f:25:41:6c:b2:71:90:ba:44:43:cb:ae:00:e3:60:08:
         e0:3d:fa:b2:cd:a4:e4:cd:9a:4b:b3:40:c2:af:7b:f5:75:c4:
         8d:f5:f9:6a:0e:8e:8c:aa:61:8a:78:58:8c:7c:d6:3c:11:57:
         2b:ea:98:42:86:cc:67:9f:60:66:fb:48:81:04:09:2c:8d:e9:
         46:88:e5:dd:c9:a0:74:c2:47:51:40:c4:ad:ef:3e:92:bd:37:
         a4:9e:3f:72:6c:13:56:a2:ce:e4:f7:08:42:ba:f0:11:1a:76:
         0e:49:3a:18:64:fa:c9:47:aa:80:38:89:9f:47:0e:b2:67:92:
         c2:ca:d8:19:15:0c:3e:4e:8c:0a:72:9a:af:55:96:44:18:4a:
         db:5d:ba:dc:3b:9c:a0:6c:bc:55:a9:b0:0a:4e:0c:e7:d2:9f:
         35:d3:6e:1c:37:15:63:ca:d6:e2:dd:3a:93:ac:3d:13:1c:c2:
         5d:0f:4c:f1:b3:72:ed:8d:00:71:64:05:17:df:86:46:ab:b9:
         ec:4f:ce:12:75:7e:e1:c6:5f:86:fe:47:53:86:72:c9:0d:25:
         81:64:98:b9:41:87:75:1a:29:18:a8:7c:a5:1e:e1:67:6a:38:
         0f:fb:2e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:40:35 2026 by rpki-client